CALEA does not require key escrow, nor, so far as I know, does PATRIOT s.215.
From my work I'm personally aware of more than one major corporate effort to cryptographically protect user data for which key escrow was not only not implemented, but countermeasures above and beyond basic cryptographic best practices were implemented to mitigate likely user errors. None of these projects would seem to me to be possible if it were the case that the USG was requiring private companies to implement key escrow.
In ~10 years of software security work performed for many of the largest companies in the world, I was never once asked to review a system that performed key escrow or anything like it (I would not work on such a system, nor would I or will I work on software security for the USG).
Not only that, but having come into contact with source code, design documents, backend systems, and similar intimate technical details, I have never --- that I can recall --- even seen something like the backdoor you alluded to.
Occam's Razor suggests to me that the popular idea that big tech companies spy on their users for the USG is fallacious.
I've never looked at Bitlocker, though, so maybe I'm wrong.
From my work I'm personally aware of more than one major corporate effort to cryptographically protect user data for which key escrow was not only not implemented, but countermeasures above and beyond basic cryptographic best practices were implemented to mitigate likely user errors. None of these projects would seem to me to be possible if it were the case that the USG was requiring private companies to implement key escrow.
In ~10 years of software security work performed for many of the largest companies in the world, I was never once asked to review a system that performed key escrow or anything like it (I would not work on such a system, nor would I or will I work on software security for the USG).
Not only that, but having come into contact with source code, design documents, backend systems, and similar intimate technical details, I have never --- that I can recall --- even seen something like the backdoor you alluded to.
Occam's Razor suggests to me that the popular idea that big tech companies spy on their users for the USG is fallacious.
I've never looked at Bitlocker, though, so maybe I'm wrong.